Privacy policy
How Outcome Works Limited collects, uses and protects personal data when you use this website or contact us.
Draft — pending review by UK counsel
Who we are
Outcome Works Limited ("Outcome Works", "we", "us") is a company registered in England and Wales, company number 15822291. We are the controller of personal data processed through outcomeworks.co.uk.
This policy is written to meet the UK GDPR and the Data Protection Act 2018, and, for visitors in the European Economic Area, the EU GDPR. You can contact us about privacy at contact@outcomeworks.co.uk.
What we collect
We keep the data we collect to the minimum needed for the purposes below.
- Contact form: your name, email address, organisation (if given) and the content of your message.
- Newsletter (if you subscribe): your email address and, if provided, your name.
- Cookies and analytics: a consent preference cookie always; analytics data only if you accept non-essential cookies. See our Cookie policy.
- Technical data: IP address and basic request data processed by our hosting provider to deliver and secure the site.
- Correspondence: records of emails or meeting bookings you make with us.
Why we use it and our lawful bases
- Responding to enquiries and arranging calls: legitimate interests (answering the people who contact us) and, where relevant, steps taken at your request before entering a contract.
- Sending the newsletter: your consent, which you can withdraw at any time.
- Analytics and non-essential cookies: your consent.
- Keeping the site secure and working: legitimate interests.
- Meeting legal and accounting obligations: legal obligation.
How long we keep it
We keep data only as long as needed for the purpose it was collected.
- Enquiries that do not lead to work: up to 24 months [confirm retention period].
- Client relationship records: for the duration of the engagement plus the period required for legal and accounting purposes [confirm].
- Newsletter subscriptions: until you unsubscribe.
- Consent preference cookie: up to 12 months [confirm].
Who we share it with
We do not sell personal data. We use the following service providers (processors) to run the site, under data processing terms:
- Web3Forms: receives and forwards contact form submissions to us.
- Cloudflare: hosting, content delivery and security for the website.
- Calendar booking provider: handles meeting bookings you choose to make [confirm provider].
- Email and productivity provider used to read and reply to your messages [confirm provider].
International transfers
Some providers may process data outside the UK or EEA, including in the United States. Where they do, we rely on an adequacy decision or approved safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses [confirm per provider].
Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing, including objecting to processing based on legitimate interests;
- data portability where applicable;
- withdraw consent at any time, without affecting earlier processing.
Complaints
Please contact us first at contact@outcomeworks.co.uk and we will try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, to your local supervisory authority.
Changes and contact
We may update this policy and will change the date above when we do. Questions or requests: contact@outcomeworks.co.uk.
